Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-84hx-be7m-pfa1
Summary
Moodle Logout CSRF in admin/tool/mfa/auth.php
The logout option within MFA did not include the necessary token to avoid the risk of users inadvertently being logged out via CSRF.
Aliases
0
alias CVE-2024-34007
1
alias GHSA-8g5h-gjwq-w5ch
Fixed_packages
0
url pkg:composer/moodle/moodle@4.3.4
purl pkg:composer/moodle/moodle@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-657g-68tv-dkam
11
vulnerability VCID-6cvg-r9am-wbh5
12
vulnerability VCID-6p1s-2r14-z7ax
13
vulnerability VCID-7p54-yn8k-aydw
14
vulnerability VCID-7trf-g8dq-tua1
15
vulnerability VCID-8uah-srba-6ubb
16
vulnerability VCID-9rqr-xzr8-5fgf
17
vulnerability VCID-9xk9-qb9x-jfcs
18
vulnerability VCID-a1ek-x154-5ydy
19
vulnerability VCID-ajrr-8392-kkcw
20
vulnerability VCID-cjvx-m4xg-p7hb
21
vulnerability VCID-d92c-j4yy-fud3
22
vulnerability VCID-dky9-v96e-pubh
23
vulnerability VCID-ffp4-23na-rkgr
24
vulnerability VCID-g3km-hbas-x3cg
25
vulnerability VCID-gwnb-e3gt-kqcb
26
vulnerability VCID-gzdw-424p-mqfa
27
vulnerability VCID-j3ts-5ghc-4qct
28
vulnerability VCID-m2a7-q28u-1yfw
29
vulnerability VCID-m3jj-r66a-d7cv
30
vulnerability VCID-m9tk-fa8m-zbah
31
vulnerability VCID-mnx8-118d-efcr
32
vulnerability VCID-nctp-rev5-puej
33
vulnerability VCID-pd2f-4kxt-bkgp
34
vulnerability VCID-pged-191y-quhm
35
vulnerability VCID-qruy-fs4p-43h1
36
vulnerability VCID-r4m3-9prr-dkby
37
vulnerability VCID-r5w9-cbyk-hqc6
38
vulnerability VCID-rcr9-z41f-sqbr
39
vulnerability VCID-rm2q-xde7-a3ej
40
vulnerability VCID-sdxf-f1b3-t3cc
41
vulnerability VCID-sgdq-5ha7-nfh2
42
vulnerability VCID-t8vm-tfnq-5kak
43
vulnerability VCID-tgs8-3n7x-cyc1
44
vulnerability VCID-ueyy-v42v-7ydh
45
vulnerability VCID-vsrk-zp7j-w7bk
46
vulnerability VCID-vve8-f9s9-v7ft
47
vulnerability VCID-wwny-t2ez-y3e1
48
vulnerability VCID-wwx4-ns21-k3hd
49
vulnerability VCID-wytb-bryq-yqb4
50
vulnerability VCID-xqha-pgc4-3udb
51
vulnerability VCID-ykj6-ptd4-7qfs
52
vulnerability VCID-z5u9-5522-h7fx
53
vulnerability VCID-z693-m8fg-63cc
54
vulnerability VCID-zjqu-hbpf-9qe1
55
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.4
Affected_packages
0
url pkg:composer/moodle/moodle@4.3.0
purl pkg:composer/moodle/moodle@4.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6726-ca8y-4uez
14
vulnerability VCID-6cvg-r9am-wbh5
15
vulnerability VCID-6p1s-2r14-z7ax
16
vulnerability VCID-7p54-yn8k-aydw
17
vulnerability VCID-7trf-g8dq-tua1
18
vulnerability VCID-84hx-be7m-pfa1
19
vulnerability VCID-893t-9cja-43g2
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-b3vw-8hzh-dybx
26
vulnerability VCID-cjvx-m4xg-p7hb
27
vulnerability VCID-d92c-j4yy-fud3
28
vulnerability VCID-dky9-v96e-pubh
29
vulnerability VCID-dp61-6ban-cyda
30
vulnerability VCID-evef-t6cx-vqcc
31
vulnerability VCID-ffp4-23na-rkgr
32
vulnerability VCID-fz5m-54ja-sbg4
33
vulnerability VCID-g3km-hbas-x3cg
34
vulnerability VCID-gwnb-e3gt-kqcb
35
vulnerability VCID-gycn-bey2-4yam
36
vulnerability VCID-gzdw-424p-mqfa
37
vulnerability VCID-hmuw-bjax-37bz
38
vulnerability VCID-j3ts-5ghc-4qct
39
vulnerability VCID-jdpb-f21j-tqa4
40
vulnerability VCID-jkyc-esnt-p3ay
41
vulnerability VCID-m2a7-q28u-1yfw
42
vulnerability VCID-m3jj-r66a-d7cv
43
vulnerability VCID-m9tk-fa8m-zbah
44
vulnerability VCID-mhh7-n7ut-hkh6
45
vulnerability VCID-mnx8-118d-efcr
46
vulnerability VCID-ms4e-v5zc-9kgc
47
vulnerability VCID-nctp-rev5-puej
48
vulnerability VCID-pd2f-4kxt-bkgp
49
vulnerability VCID-pged-191y-quhm
50
vulnerability VCID-qabh-bpmn-1ye5
51
vulnerability VCID-qruy-fs4p-43h1
52
vulnerability VCID-r1ug-e8x6-83gt
53
vulnerability VCID-r4m3-9prr-dkby
54
vulnerability VCID-r5w9-cbyk-hqc6
55
vulnerability VCID-rcr9-z41f-sqbr
56
vulnerability VCID-rj3m-eyur-g7gc
57
vulnerability VCID-rm2q-xde7-a3ej
58
vulnerability VCID-sdxf-f1b3-t3cc
59
vulnerability VCID-sgdq-5ha7-nfh2
60
vulnerability VCID-t8vm-tfnq-5kak
61
vulnerability VCID-tgs8-3n7x-cyc1
62
vulnerability VCID-ueyy-v42v-7ydh
63
vulnerability VCID-umd1-pmr4-4bgs
64
vulnerability VCID-vsrk-zp7j-w7bk
65
vulnerability VCID-vve8-f9s9-v7ft
66
vulnerability VCID-wwny-t2ez-y3e1
67
vulnerability VCID-wwx4-ns21-k3hd
68
vulnerability VCID-wytb-bryq-yqb4
69
vulnerability VCID-xqha-pgc4-3udb
70
vulnerability VCID-y4g2-328f-qbge
71
vulnerability VCID-yc6t-am1p-x3ev
72
vulnerability VCID-ykj6-ptd4-7qfs
73
vulnerability VCID-ytd5-2swj-wkh1
74
vulnerability VCID-z5u9-5522-h7fx
75
vulnerability VCID-z693-m8fg-63cc
76
vulnerability VCID-zjqu-hbpf-9qe1
77
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.0
1
url pkg:composer/moodle/moodle@4.3.1
purl pkg:composer/moodle/moodle@4.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6726-ca8y-4uez
14
vulnerability VCID-6cvg-r9am-wbh5
15
vulnerability VCID-6p1s-2r14-z7ax
16
vulnerability VCID-7p54-yn8k-aydw
17
vulnerability VCID-7trf-g8dq-tua1
18
vulnerability VCID-84hx-be7m-pfa1
19
vulnerability VCID-893t-9cja-43g2
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-b3vw-8hzh-dybx
26
vulnerability VCID-cjvx-m4xg-p7hb
27
vulnerability VCID-d92c-j4yy-fud3
28
vulnerability VCID-dky9-v96e-pubh
29
vulnerability VCID-dp61-6ban-cyda
30
vulnerability VCID-evef-t6cx-vqcc
31
vulnerability VCID-ffp4-23na-rkgr
32
vulnerability VCID-fz5m-54ja-sbg4
33
vulnerability VCID-g3km-hbas-x3cg
34
vulnerability VCID-gwnb-e3gt-kqcb
35
vulnerability VCID-gycn-bey2-4yam
36
vulnerability VCID-gzdw-424p-mqfa
37
vulnerability VCID-hmuw-bjax-37bz
38
vulnerability VCID-j3ts-5ghc-4qct
39
vulnerability VCID-jdpb-f21j-tqa4
40
vulnerability VCID-jkyc-esnt-p3ay
41
vulnerability VCID-m2a7-q28u-1yfw
42
vulnerability VCID-m3jj-r66a-d7cv
43
vulnerability VCID-m9tk-fa8m-zbah
44
vulnerability VCID-mhh7-n7ut-hkh6
45
vulnerability VCID-mnx8-118d-efcr
46
vulnerability VCID-ms4e-v5zc-9kgc
47
vulnerability VCID-nctp-rev5-puej
48
vulnerability VCID-pd2f-4kxt-bkgp
49
vulnerability VCID-pged-191y-quhm
50
vulnerability VCID-qabh-bpmn-1ye5
51
vulnerability VCID-qruy-fs4p-43h1
52
vulnerability VCID-r1ug-e8x6-83gt
53
vulnerability VCID-r4m3-9prr-dkby
54
vulnerability VCID-r5w9-cbyk-hqc6
55
vulnerability VCID-rcr9-z41f-sqbr
56
vulnerability VCID-rm2q-xde7-a3ej
57
vulnerability VCID-sdxf-f1b3-t3cc
58
vulnerability VCID-sgdq-5ha7-nfh2
59
vulnerability VCID-t8vm-tfnq-5kak
60
vulnerability VCID-tgs8-3n7x-cyc1
61
vulnerability VCID-ueyy-v42v-7ydh
62
vulnerability VCID-umd1-pmr4-4bgs
63
vulnerability VCID-vsrk-zp7j-w7bk
64
vulnerability VCID-vve8-f9s9-v7ft
65
vulnerability VCID-wwny-t2ez-y3e1
66
vulnerability VCID-wwx4-ns21-k3hd
67
vulnerability VCID-wytb-bryq-yqb4
68
vulnerability VCID-xqha-pgc4-3udb
69
vulnerability VCID-y4g2-328f-qbge
70
vulnerability VCID-yc6t-am1p-x3ev
71
vulnerability VCID-ykj6-ptd4-7qfs
72
vulnerability VCID-ytd5-2swj-wkh1
73
vulnerability VCID-z5u9-5522-h7fx
74
vulnerability VCID-z693-m8fg-63cc
75
vulnerability VCID-zjqu-hbpf-9qe1
76
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.1
2
url pkg:composer/moodle/moodle@4.3.2
purl pkg:composer/moodle/moodle@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6726-ca8y-4uez
14
vulnerability VCID-6cvg-r9am-wbh5
15
vulnerability VCID-6p1s-2r14-z7ax
16
vulnerability VCID-7p54-yn8k-aydw
17
vulnerability VCID-7trf-g8dq-tua1
18
vulnerability VCID-84hx-be7m-pfa1
19
vulnerability VCID-893t-9cja-43g2
20
vulnerability VCID-8uah-srba-6ubb
21
vulnerability VCID-9rqr-xzr8-5fgf
22
vulnerability VCID-9xk9-qb9x-jfcs
23
vulnerability VCID-a1ek-x154-5ydy
24
vulnerability VCID-ajrr-8392-kkcw
25
vulnerability VCID-b3vw-8hzh-dybx
26
vulnerability VCID-cjvx-m4xg-p7hb
27
vulnerability VCID-d92c-j4yy-fud3
28
vulnerability VCID-dky9-v96e-pubh
29
vulnerability VCID-dp61-6ban-cyda
30
vulnerability VCID-evef-t6cx-vqcc
31
vulnerability VCID-ffp4-23na-rkgr
32
vulnerability VCID-fz5m-54ja-sbg4
33
vulnerability VCID-g3km-hbas-x3cg
34
vulnerability VCID-gwnb-e3gt-kqcb
35
vulnerability VCID-gycn-bey2-4yam
36
vulnerability VCID-gzdw-424p-mqfa
37
vulnerability VCID-hmuw-bjax-37bz
38
vulnerability VCID-j3ts-5ghc-4qct
39
vulnerability VCID-jdpb-f21j-tqa4
40
vulnerability VCID-jkyc-esnt-p3ay
41
vulnerability VCID-m2a7-q28u-1yfw
42
vulnerability VCID-m3jj-r66a-d7cv
43
vulnerability VCID-m9tk-fa8m-zbah
44
vulnerability VCID-mhh7-n7ut-hkh6
45
vulnerability VCID-mnx8-118d-efcr
46
vulnerability VCID-ms4e-v5zc-9kgc
47
vulnerability VCID-nctp-rev5-puej
48
vulnerability VCID-pd2f-4kxt-bkgp
49
vulnerability VCID-pged-191y-quhm
50
vulnerability VCID-qabh-bpmn-1ye5
51
vulnerability VCID-qruy-fs4p-43h1
52
vulnerability VCID-r1ug-e8x6-83gt
53
vulnerability VCID-r4m3-9prr-dkby
54
vulnerability VCID-r5w9-cbyk-hqc6
55
vulnerability VCID-rcr9-z41f-sqbr
56
vulnerability VCID-rm2q-xde7-a3ej
57
vulnerability VCID-sdxf-f1b3-t3cc
58
vulnerability VCID-sgdq-5ha7-nfh2
59
vulnerability VCID-t8vm-tfnq-5kak
60
vulnerability VCID-tgs8-3n7x-cyc1
61
vulnerability VCID-ueyy-v42v-7ydh
62
vulnerability VCID-umd1-pmr4-4bgs
63
vulnerability VCID-vsrk-zp7j-w7bk
64
vulnerability VCID-vve8-f9s9-v7ft
65
vulnerability VCID-wwny-t2ez-y3e1
66
vulnerability VCID-wwx4-ns21-k3hd
67
vulnerability VCID-wytb-bryq-yqb4
68
vulnerability VCID-xqha-pgc4-3udb
69
vulnerability VCID-y4g2-328f-qbge
70
vulnerability VCID-yc6t-am1p-x3ev
71
vulnerability VCID-ykj6-ptd4-7qfs
72
vulnerability VCID-ytd5-2swj-wkh1
73
vulnerability VCID-z5u9-5522-h7fx
74
vulnerability VCID-z693-m8fg-63cc
75
vulnerability VCID-zjqu-hbpf-9qe1
76
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.2
3
url pkg:composer/moodle/moodle@4.3.3
purl pkg:composer/moodle/moodle@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17k8-g4xw-b7g9
1
vulnerability VCID-1efm-18zh-w7gm
2
vulnerability VCID-1wup-hjxg-f7g4
3
vulnerability VCID-21mq-pewz-ekdt
4
vulnerability VCID-29mv-feyq-guew
5
vulnerability VCID-2urf-d2qr-abdy
6
vulnerability VCID-2wsu-7rzh-h7cs
7
vulnerability VCID-3nu2-1cwj-sfdd
8
vulnerability VCID-3nvq-s7y5-fufr
9
vulnerability VCID-3yre-ft3n-2fd3
10
vulnerability VCID-5ba5-pee7-6kh1
11
vulnerability VCID-5s33-v19s-sqd6
12
vulnerability VCID-657g-68tv-dkam
13
vulnerability VCID-6cvg-r9am-wbh5
14
vulnerability VCID-6p1s-2r14-z7ax
15
vulnerability VCID-7p54-yn8k-aydw
16
vulnerability VCID-7trf-g8dq-tua1
17
vulnerability VCID-84hx-be7m-pfa1
18
vulnerability VCID-893t-9cja-43g2
19
vulnerability VCID-8uah-srba-6ubb
20
vulnerability VCID-9rqr-xzr8-5fgf
21
vulnerability VCID-9xk9-qb9x-jfcs
22
vulnerability VCID-a1ek-x154-5ydy
23
vulnerability VCID-ajrr-8392-kkcw
24
vulnerability VCID-b3vw-8hzh-dybx
25
vulnerability VCID-cjvx-m4xg-p7hb
26
vulnerability VCID-d92c-j4yy-fud3
27
vulnerability VCID-dky9-v96e-pubh
28
vulnerability VCID-dp61-6ban-cyda
29
vulnerability VCID-evef-t6cx-vqcc
30
vulnerability VCID-ffp4-23na-rkgr
31
vulnerability VCID-fz5m-54ja-sbg4
32
vulnerability VCID-g3km-hbas-x3cg
33
vulnerability VCID-gwnb-e3gt-kqcb
34
vulnerability VCID-gzdw-424p-mqfa
35
vulnerability VCID-hmuw-bjax-37bz
36
vulnerability VCID-j3ts-5ghc-4qct
37
vulnerability VCID-jdpb-f21j-tqa4
38
vulnerability VCID-jkyc-esnt-p3ay
39
vulnerability VCID-m2a7-q28u-1yfw
40
vulnerability VCID-m3jj-r66a-d7cv
41
vulnerability VCID-m9tk-fa8m-zbah
42
vulnerability VCID-mnx8-118d-efcr
43
vulnerability VCID-ms4e-v5zc-9kgc
44
vulnerability VCID-nctp-rev5-puej
45
vulnerability VCID-pd2f-4kxt-bkgp
46
vulnerability VCID-pged-191y-quhm
47
vulnerability VCID-qruy-fs4p-43h1
48
vulnerability VCID-r4m3-9prr-dkby
49
vulnerability VCID-r5w9-cbyk-hqc6
50
vulnerability VCID-rcr9-z41f-sqbr
51
vulnerability VCID-rm2q-xde7-a3ej
52
vulnerability VCID-sdxf-f1b3-t3cc
53
vulnerability VCID-sgdq-5ha7-nfh2
54
vulnerability VCID-t8vm-tfnq-5kak
55
vulnerability VCID-tgs8-3n7x-cyc1
56
vulnerability VCID-ueyy-v42v-7ydh
57
vulnerability VCID-umd1-pmr4-4bgs
58
vulnerability VCID-vsrk-zp7j-w7bk
59
vulnerability VCID-vve8-f9s9-v7ft
60
vulnerability VCID-wwny-t2ez-y3e1
61
vulnerability VCID-wwx4-ns21-k3hd
62
vulnerability VCID-wytb-bryq-yqb4
63
vulnerability VCID-xqha-pgc4-3udb
64
vulnerability VCID-y4g2-328f-qbge
65
vulnerability VCID-ykj6-ptd4-7qfs
66
vulnerability VCID-ytd5-2swj-wkh1
67
vulnerability VCID-z5u9-5522-h7fx
68
vulnerability VCID-z693-m8fg-63cc
69
vulnerability VCID-zjqu-hbpf-9qe1
70
vulnerability VCID-zrjj-atms-8uf9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@4.3.3
References
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80877
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80877
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34007
reference_id
reference_type
scores
0
value 0.00688
scoring_system epss
scoring_elements 0.72159
published_at 2026-06-07T12:55:00Z
1
value 0.00688
scoring_system epss
scoring_elements 0.7218
published_at 2026-06-06T12:55:00Z
2
value 0.00688
scoring_system epss
scoring_elements 0.72173
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34007
2
reference_url https://github.com/moodle/moodle
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/moodle/moodle
3
reference_url https://moodle.org/mod/forum/discuss.php?d=458396
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-21T19:13:49Z/
url https://moodle.org/mod/forum/discuss.php?d=458396
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34007
reference_id CVE-2024-34007
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34007
5
reference_url https://github.com/advisories/GHSA-8g5h-gjwq-w5ch
reference_id GHSA-8g5h-gjwq-w5ch
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8g5h-gjwq-w5ch
Weaknesses
0
cwe_id 352
name Cross-Site Request Forgery (CSRF)
description The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 8.8
Exploitability0.5
Weighted_severity7.0
Risk_score3.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-84hx-be7m-pfa1